TI-2014-07621 CVE-2014-9392 · GHSA-r28r-hqjw-7rf7Cross-site request forgery (CSRF) vulnerability in the PictoBrowser…Priority LOW 32Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that c…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01001 · Published 2014-12-31 · No fix listed CWE-352